Trying to clone an RT-AC88U to use as a backup

[Harry D]

Trying to clone an RT-AC88U to use as a backup. Seemed pretty straight forward. I reset to factory defaults, flashed with the same Asuswrt-Merlin as on the other RT-AC88U and uploaded the saved settings from the other router. Powered up the newer router and all seemed perfect until I tried to use OVPN from my laptop. I'm using plain vanilla Asus OVPN. I tried re-Exporting the OpenVPN configuration file and uploading it in the Client tab (after resetting to Default) but I don't see any way to save a "client.ovpn" file to use on the laptop.

Thanks in advance,
Harry

 

[OzarkEdge]

Trying to clone an RT-AC88U to use as a backup. Seemed pretty straight forward. I reset to factory defaults, flashed with the same Asuswrt-Merlin as on the other RT-AC88U and uploaded the saved settings from the other router. Powered up the newer router and all seemed perfect until I tried to use OVPN from my laptop. I'm using plain vanilla Asus OVPN. I tried re-Exporting the OpenVPN configuration file and uploading it in the Client tab (after resetting to Default) but I don't see any way to save a "client.ovpn" file to use on the laptop.

Thanks in advance,
Harry

Probably not a good idea to mix hardware, even of the same model, but you can try it.

You should Hard Reset the installed firmware before restoring the .cfg file... this is resetting the firmware, not the hardware.

FW Reset FAQ

OE

 

[Harry D]

I did a hard reset before flashing with Asuswrt-Merlin and uploading the saved cfg. Everything seems to be working perfectly except I can't figure out how to save a client.ovpn file for use on my laptop.

 

[ColinTaylor]

I'm using plain vanilla Asus OVPN.

I really can't follow what you're describing here. What is "plain vanilla Asus OVPN"? You said you were using Merlin's firmware.

I tried re-Exporting the OpenVPN configuration file and uploading it in the Client tab (after resetting to Default) but I don't see any way to save a "client.ovpn" file to use on the laptop.

Again, I can't follow what machine you're "re-Exporting" from or where this "Client tab" is that you're referring to.

With that said, if you're using Merlin's firmware then you also need to backup and restore the JFFS partition because that is where the VPN data is stored.

 

[OzarkEdge]

I did a hard reset before flashing with Asuswrt-Merlin

Which means you did not reset Asuswrt-Merlin to its default settings. But if it works, it works.

OE

 

[Harry D]

I really can't follow what you're describing here. What is "plain vanilla Asus OVPN"? You said you were using Merlin's firmware.

Yes you are correct I am using Merlin's firmware. What I was trying to say is I am using the router's built in VPN not something like NordVPN.

Again, I can't follow what machine you're "re-Exporting" from or where this "Client tab" is that you're referring to.

Please see the third screen cap below.

With that said, if you're using Merlin's firmware then you also need to backup and restore the JFFS partition because that is where the VPN data is stored.

From this post (https://www.snbforums.com/threads/jffs-backup-and-restore.65925/#post-612654) you stated "If you're only interested in the jffs partition just use the option in the router's GUI (Administration > Restore/Save/Upload Setting), that's what it's there for." I did the Save on the original router then I did the Upload on the "new" router. Here is a screenshot:

After uploading the saved settings to the "New" router I went into the VPN Server tab and choose Export OpenVPN configuration file as shown below:

I then went into the Client tab and clicked Default and Apply. Next I choose Import .ovpn file as shown below:

This is where I am stumped. It seems that somewhere on the screen I should be able to export/create a new client1.ovpn file for use on the laptop. I'm not seeing how.

Here is the screen I see when I use the client.ovpn file that works on the "original" router:

I appreciate your help.

 

[ColinTaylor]

After uploading the saved settings to the "New" router I went into the VPN Server tab and choose Export OpenVPN configuration file as shown below:

I then went into the Client tab and clicked Default and Apply. Next I choose Import .ovpn file as shown below:
View attachment 63093
This is where I am stumped. It seems that somewhere on the screen I should be able to export/create a new client1.ovpn file for use on the laptop. I'm not seeing how.

I believe this is where you're going wrong.

As I understand it you're trying to replicate the VPN server on the new router. But what you're doing is exporting a client's file from your old router and importing it into the new router's VPN client.

Part of the issue is that the VPN server config information is stored in both NVRAM and JFFS. So to completely clone the old router onto the new you would have to also copy the JFFS partition data, not just the "Save settings" file.

 

[Tech9]

I've done a few times exactly what @Harry D wants to do and it works as expected.

Save/restore settings + JFFS save/restore or exported/imported server certificate for the VPN server both work.

 

[Harry D]

I believe this is where you're going wrong.

As I understand it you're trying to replicate the VPN server on the new router. But what you're doing is exporting a client's file from your old router and importing it into the new router's VPN client.

Part of the issue is that the VPN server config information is stored in both NVRAM and JFFS. So to completely clone the old router onto the new you would have to also copy the JFFS partition data, not just the "Save settings" file.

Ok, I did get it working. What I did was: set the Server back to Defaults and reentered the appropriate settings. Then Exported OpenVPN configuration file. Then Imported .ovpn file in the Client tab. Saved the client1.ovpn file to the appropriate folder on the laptop and bingo I was in.

Thanks again for your help.

 

[ColinTaylor]

Then Imported .ovpn file in the Client tab.

This step is redundant because you're not using the router's VPN client.

 

[Harry D]

This step is redundant because you're not using the router's VPN client.

Got it. Makes total sense now.